Vendors / Quotes Collection Project Quotes Collection Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Quotes Collection Project records in CISA KEV No Quotes Collection Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01317 · Published 2021-12-13 · No fix listed CWE-89
Priority LOW 30
The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01392 · Published 2019-09-13 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 1 0 0
